Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
File: 31rDE7L3xc3GUDLKoGSK1zjwdds.mft (raw, json)
Hash identifier: 5dXK1qQaeBA9c+5dQwGoWPdaPpX80+BJeSfS7eKQoag=
Subject key identifier: 02:B6:66:F5:E2:AD:29:BE:85:BF:0E:F2:6A:FC:C5:00:8D:36:E5:89
Authority key identifier: DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB
Certificate issuer: /CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
Certificate serial: 019F8EA21BBC20C17ECB03DE2FBA1CADEE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
Manifest number: 72
Signing time: Thu 23 Jul 2026 11:00:16 +0000
Manifest this update: Thu 23 Jul 2026 11:00:16 +0000
Manifest next update: Fri 24 Jul 2026 11:00:16 +0000
Files and hashes: 1: 31rDE7L3xc3GUDLKoGSK1zjwdds.crl (hash: JBcfoP8MzDi+q5JPL8CVWTnbRGV4KqgLxPXMiKfizPU=)
2: 7kBOew20AqCcSN7unx6uuoSngeg.roa (hash: oLLPx2wFkNsUiyxMXNv8D1J8xAnpI1BWVugs3oA0gdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:1b:bc:20:c1:7e:cb:03:de:2f:ba:1c:ad:ee:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
Validity
Not Before: Jul 23 11:00:16 2026 GMT
Not After : Jul 24 11:00:16 2026 GMT
Subject: CN=02b666f5e2ad29be85bf0ef26afcc5008d36e589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:1d:71:a1:d9:b4:bd:6b:1e:46:c9:1e:6b:
b0:97:f9:39:55:48:57:0b:8a:48:fb:fc:2d:9b:b2:
df:7f:2b:93:56:1f:1c:a1:e0:39:33:9c:c6:d7:81:
a7:94:ec:0a:4a:aa:97:4c:f5:ee:a7:ef:e5:07:1e:
65:ae:5b:51:3f:71:cf:a8:ba:c8:9f:26:26:9a:29:
33:c0:3f:c8:32:31:4b:84:46:70:7b:b8:2c:21:b6:
15:15:c1:be:55:81:4a:8e:28:6e:f3:bc:4d:c9:56:
d2:42:24:98:39:e6:43:00:d8:aa:36:5c:65:9a:1a:
ec:80:17:9e:49:8b:f5:a6:69:fc:e1:74:be:ba:2c:
0d:01:36:f0:ae:ae:d1:8c:75:5a:24:8b:77:12:95:
99:12:79:d5:69:5b:54:3c:e6:94:25:db:81:fb:c6:
bc:dc:78:02:52:41:cb:61:c7:01:c0:96:c6:19:47:
8d:ac:2a:31:0b:d4:54:60:b0:77:75:63:a4:12:a8:
14:56:a3:f0:0b:2c:97:c2:44:41:c0:59:78:4c:fa:
00:bb:42:00:d1:8d:1e:8e:67:6f:85:ad:9d:f1:73:
00:0e:82:a7:c4:d6:3f:66:0e:61:c5:3f:4e:ed:e0:
c4:7f:cd:de:4c:7f:ab:d2:7a:90:26:be:45:09:c0:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B6:66:F5:E2:AD:29:BE:85:BF:0E:F2:6A:FC:C5:00:8D:36:E5:89
X509v3 Authority Key Identifier:
keyid:DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d5:93:93:bd:01:d2:1e:75:56:75:b5:4f:df:f6:bf:9d:8e:
a0:00:05:3a:3e:d8:b5:a2:f6:e1:ee:f7:ba:08:35:57:38:71:
48:94:b3:de:8e:38:db:68:1a:10:88:c2:89:04:f4:40:03:96:
11:e1:27:fc:a4:b1:e9:1e:ac:2f:cb:14:8a:7f:2f:10:4d:6b:
7c:a8:ab:45:a0:62:e8:d8:b6:ce:69:7e:8e:bd:07:17:47:d0:
2a:c6:d2:e6:1e:87:4e:d5:c2:fa:09:f3:f4:39:a4:2b:a9:46:
21:8c:e1:7a:3f:53:c8:d7:92:4b:52:7e:d4:fa:8a:0b:f1:2c:
e6:c3:ec:e1:27:74:eb:ff:a0:a3:39:f8:db:5a:79:8a:36:2d:
a0:2a:e5:01:aa:bd:a9:ab:78:b0:56:2d:5a:a6:f1:c9:09:57:
9c:3c:bc:25:8d:8f:c1:6b:21:ac:01:66:57:eb:0e:31:26:00:
80:a8:2b:c1:01:eb:8f:67:79:07:04:02:2a:51:da:85:e1:6f:
8d:e8:f0:8c:e4:a9:91:3e:81:e4:14:31:84:af:7c:00:27:f1:
d8:e7:ae:da:6f:c8:03:f1:fb:21:a0:00:89:14:58:ac:b9:b4:
16:c3:45:d7:64:25:42:b6:4f:74:58:4a:1a:c2:63:25:a1:05:
e7:95:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:31 2026 by rpki-client